Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142084.roa
File: AS142084.roa (raw, json)
Hash identifier: gUIIQQh4nAHbplwIu7WbJ2pqOVHB2DPdbeH0kPI4+CU=
Subject key identifier: F8:3B:D8:B8:30:B8:45:F2:A4:6A:D1:EF:93:EF:FE:02:B7:5C:60:8F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0FC97F41B6448167F574A592CD984F0A2B40F589
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142084.roa
Signing time: Tue 26 May 2026 08:52:58 +0000
ROA not before: Tue 26 May 2026 08:47:58 +0000
ROA not after: Tue 25 May 2027 08:52:58 +0000
asID: 142084
IP address blocks: 2001:253:218::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:c9:7f:41:b6:44:81:67:f5:74:a5:92:cd:98:4f:0a:2b:40:f5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:58 2026 GMT
Not After : May 25 08:52:58 2027 GMT
Subject: CN=F83BD8B830B845F2A46AD1EF93EFFE02B75C608F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:cc:cf:c7:63:7f:f5:0f:7e:c1:ea:bb:66:
f9:73:d7:63:4c:64:a7:b5:9a:02:c9:18:26:30:77:
3a:37:1e:5c:31:20:11:45:58:d4:c7:9f:fd:b9:90:
5e:73:09:54:45:df:3e:05:ac:51:3e:d2:5e:07:e3:
be:83:44:f0:1e:41:f9:aa:57:5d:f9:f3:e8:ae:b5:
50:d4:fb:13:25:af:a7:cb:38:c6:2c:9c:26:47:dd:
e5:e0:d3:9e:87:63:4d:72:5d:6d:ec:ec:1b:d5:68:
43:de:cf:f1:3a:56:c1:05:3e:de:96:b9:a8:6d:53:
7d:43:07:7a:b5:2f:c6:e4:40:37:63:39:ea:02:26:
90:1e:45:02:03:b8:17:b1:c5:bd:91:fd:da:87:88:
9d:62:aa:f0:0f:5b:9a:35:84:6c:fc:56:13:64:9f:
78:58:94:02:1f:08:71:8c:c9:fc:1a:d7:73:d1:e9:
3f:56:f6:0d:8a:24:84:c0:49:2e:ad:42:b9:2e:c4:
12:2c:b3:01:e8:93:19:a1:ac:a0:dd:3d:ca:04:88:
d4:0f:6d:79:86:de:94:24:d6:de:43:1e:6b:1b:1f:
7e:21:01:bd:d5:be:13:7d:0f:a7:7d:1d:36:1c:6f:
6d:fa:49:7f:97:1a:7a:f0:27:48:36:28:e3:a6:2f:
7c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3B:D8:B8:30:B8:45:F2:A4:6A:D1:EF:93:EF:FE:02:B7:5C:60:8F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142084.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:253:218::/48
Signature Algorithm: sha256WithRSAEncryption
93:3d:2b:36:05:cb:a0:6f:f6:55:a1:dd:91:02:b7:e4:b4:fa:
d6:29:cd:0a:5f:cf:1e:c8:32:41:94:08:b9:7d:a2:ff:25:3d:
8c:60:31:33:9d:dd:5c:5e:aa:22:42:c3:f5:9a:d4:97:ad:d2:
3b:58:e4:82:1b:ba:3e:26:36:c1:d0:50:0e:eb:67:27:dc:d4:
b0:43:93:ba:72:c3:df:63:7a:52:b4:d6:f6:e9:56:dd:00:1f:
0d:24:eb:f5:68:6c:55:e9:6d:e3:06:24:96:ea:60:9f:bc:36:
02:37:a5:9d:e9:26:c4:ce:37:7d:c5:55:cd:fc:e8:0a:01:70:
87:74:7f:23:f0:02:2b:1c:9b:70:30:be:1d:e4:3b:2d:29:37:
db:ec:9b:1f:75:1d:f9:6d:e3:b1:cc:b3:ec:d8:df:4d:b6:25:
32:19:2f:ae:7d:62:3b:6c:c3:94:73:09:62:01:70:ff:14:06:
06:bb:28:c2:d5:91:54:56:a1:6b:c4:31:dc:92:89:b8:dd:82:
fa:43:04:ef:c1:b4:a2:76:cb:f8:ec:d9:cf:b3:31:90:ac:2c:
83:ab:43:85:e5:9f:49:bc:10:8f:e5:d5:1e:17:ed:6a:86:ef:
80:e1:2d:71:d4:21:2f:08:36:26:66:17:72:fc:2c:bb:aa:36:
09:f6:95:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:21 2026 by rpki-client